draft-parecki-oauth-jwt-dpop-grant
OAuth 2.0 JWT Authorization Grant with DPoP Binding
This specification defines a new OAuth 2.0 authorization grant type
that uses a JSON Web Token (JWT) assertion to request an access token
that is bound to a specific key using the Demonstration of Proof-of-
Possession (DPoP) mechanism. This provides a higher level of
security than a simple bearer token, as the client must prove
possession of the key to use the access token.